About the Role
You will build and operate privacy, compliance, and trust programs. You will drive privacy engineering initiatives, manage data-rights and retention operations, oversee risk and third-party management, govern model-provider obligations and trust-and-safety processes, and provide compliance sign-off for external representations.
Requirements
•Experience building a privacy or compliance program
•Technical fluency to work with engineers on privacy and trust systems
•Deep knowledge of GDPR and US state privacy regimes
•Ability to conduct DPIAs and assess controller and processor boundaries
•Internal audit experience with SOC 2 and preferably ISO 27001
•Experience owning contractual external-party obligations
•Commercial privacy experience
•Experience managing time-bound obligations such as mandated reporting, breach notification, or regulatory disclosure
Responsibilities
•Own privacy operations, including processing records, data subject rights, retention, breach notification, and privacy notices
•Drive privacy and trust engineering initiatives, including de-identification, pseudonymous identifiers, and data lifecycle controls
•Manage compliance frameworks, continuous compliance monitoring, and the risk register
•Own third-party risk management and API and gateway privacy operations
•Manage model-provider compliance obligations and trust operations
•Govern trust and safety processes, mandated reporting, evidence preservation, moderation oversight, and enforcement policy
•Review vendor and provider onboarding
•Sign off on compliance representations to customers, providers, auditors, and regulators
Benefits
•Medical benefits
•Dental benefits
•Vision benefits
•Additional health and wellness support programs
